Black Hat Courses

Windows Phone 7 Internals and Exploitability

Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hardware Backdooring is Practical

Explores hardware backdooring through Rakshasa malware, demonstrating permanent BIOS infection, NX bit disabling, and security lowering across various motherboards using open-source components like Coreboot.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

SSRF vs Business Critical Applications

Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Recent Java Exploitation Trends and Malware

Explore recent Java vulnerabilities, exploitation techniques, and malware trends. Learn about sandbox evasion, multi-platform attacks, and challenges in analyzing obfuscated Java exploits.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

CuteCats.exe and the Arab Spring

Analysis of malware targeting activists during Middle Eastern uprisings, exploring distribution methods and impact on digital dissent and online communities.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Smashing the Future for Fun and Profit

Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Probing Mobile Operator Networks

Explore techniques for probing cellular networks, uncovering diverse connected devices, and discussing security implications of findings from network investigations.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hookin Ain't Easy - BeEF Injection with MITM

Explore browser exploitation techniques using MITM attacks and the BeEF Framework. Learn to hook browsers without social engineering or XSS, and maintain connections for advanced penetration testing.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

The Defense Rests - Automation and APIs for Improving Security

Explore automation and APIs for enhancing security through centralized management, testing, and evidence-driven approaches. Learn to leverage open-source tools and protocols for efficient vulnerability detection and faster recovery.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Exchanging Demands

Explore vulnerabilities in Microsoft Exchange's mobile device management, focusing on remote wipe functionality and potential exploitation through policy updates without authentication.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Control-Alt-Hack - White Hat Hacking for Fun & Profit

Explore ethical hacking through a card game that simulates security audits and consulting. Learn about diverse hacking skills, mission challenges, and cybersecurity concepts in an engaging, entertaining format.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Libinjection - A C Library for SQLI Detection and Generation Through Lexical Analysis

Innovative C library for SQL injection detection using lexical analysis, offering high precision and accuracy. Trained on real attacks, it categorizes threats and provides templates for new attack detection.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

State of Web Exploit Toolkits

Deep dive into popular web exploit toolkits, analyzing construction, shellcodes, obfuscations, and exploits. Explore trends, data harvesting methods, and emerging players in cybercriminal landscape.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Intrusion Detection Along the Kill Chain - Why Your Detection System Sucks

Explore advanced intrusion detection techniques using the attacker plane and kill chain concepts to improve cybersecurity effectiveness beyond traditional vendor solutions.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Passive Bluetooth Monitoring in Scapy

Explore passive Bluetooth monitoring in Scapy using Python extensions and Ubertooth dongle, enabling interactive observation and development of Bluetooth auditing and pentesting tools.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk